d220bad912479a333f80c833c9912b30N[.]exe | Triage

Sharing

General

Target

d220bad912479a333f80c833c9912b30N.exe
Size

6KB
MD5

d220bad912479a333f80c833c9912b30
SHA1

5f62159273f49ff0f0abf5060ae2c3defd4cb4f5
SHA256

28f5add2a52e6a99250bf395e16f1b2ec7385da04af5f6d1e963abdf8525f04a
SHA512

047d2b1d9951bb57da91be414274b5af26e6619648ee1b4a7c3e63c2e7f7a9d91ebaa6c0d694d861129e7365b82646f82c94425e6603c984ff475f357e3f1f74
SSDEEP

96:nEY2RrF1eqwi4nWDHM+q9rGqup3uEzuzW5inn:EHRh1eppWDHM+GEzuy5G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d220bad912479a333f80c833c9912b30N.exe

Files

d220bad912479a333f80c833c9912b30N.exe
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ